CVE-2025-62706 vulnerabilities

Vulnerabilities for packages: mlflow...

Symlink Attack

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Symlink Attack due to insufficient validation that artifact paths...

SQL Injection

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to SQL Injection due to unsafe construction of SQL statements in the...

Command Injection via Malicious Model Artifacts

A command injection vulnerability exists in MLflow's model serving container initialization code. When deploying a model with envmanager=LOCAL, MLflow reads dependency specifications from the model artifact's pythonenv.yaml file and directly interpolates them into a shell command without...

MLflow Tarfile Path traversal in mlflow/mlflow

Description Vulnerability Report: Unsafe Tar Extraction Path Traversal Due to the lack of path traversal verification in the tar decompression part, it may lead to the possibility of overwriting any file or gaining elevated privileges. This is a non-expected vulnerability. Location File:...

Weak Password Requirements

MLflow is vulnerable to Weak Password Requirements. The vulnerability is due to weak password requirements in the authentication mechanism, which allows an attacker to bypass authentication and gain unauthorized access to the system...

MLflow SageMaker Command Injection Vulnerability

Description The vulnerability exists in /mlflow/sagemaker/init.py at lines 161-167, where user-supplied container image names are directly interpolated into shell commands without proper sanitization before being passed to os.system. Vulnerable Code Path : CLI Input --container parameter ↓...

PT-2026-25547

Name of the Vulnerable Software and Affected Versions mlflow versions prior to 3.7.0 Description A command injection issue exists due to the direct interpolation of user-supplied container image names into shell commands without proper sanitization. These commands are then executed using the...

GHSA-768J-98CG-P3FV vulnerabilities

Vulnerabilities for packages: mlflow, open-webui...

CVE-2025-66034 vulnerabilities

Vulnerabilities for packages: mlflow, open-webui...

CVE-2025-66034 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter, open-webui, tensorflow-gpu-jupyter, mlflow...

GHSA-768J-98CG-P3FV vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter, open-webui, tensorflow-gpu-jupyter, mlflow...

BIT-MLFLOW-2025-11201 MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw...

BIT-MLFLOW-2025-11200 MLflow Weak Password Requirements Authentication Bypass Vulnerability

MLflow Weak Password Requirements Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords...

GHSA-7F5H-V6XP-FCQ8 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, k8s-sidecar, mlflow, kserve, reflex...

CVE-2025-62727 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, k8s-sidecar, mlflow, kserve, reflex...

CVE-2025-62727 vulnerabilities

Vulnerabilities for packages: mlflow, airflow, k8s-sidecar, reflex, open-webui, airflow-core, kserve, nemo...

GHSA-7F5H-V6XP-FCQ8 vulnerabilities

Vulnerabilities for packages: mlflow, airflow, k8s-sidecar, reflex, open-webui, airflow-core, kserve, nemo...

EUVD-2025-36707

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw...

MLflow Weak Password Requirements Authentication Bypass Vulnerability

MLflow Weak Password Requirements Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords...